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What is claimed is: 



Claims 



1 1 . A method for obtaining an approval of an electronic fund transfer disbursement 

2 file from a user of a remote system and transferring the electronic fund transfer 

3 disbursement file to a payments processor, the method comprising: 

4 generating a digest by performing a hash on the electronic fund transfer 

5 disbursement file; 

6 transferring the digest to the remote system; 

7 transferring authorization control code to the remote system, the authorization 

8 control code driving the remote system to perform the following steps: 

9 obtain a digital signature of authenticated attributes, the authenticated 

10 attributes including the digest; 

n generate an authorization response, the authorization response including 

12 the digital signature; 

13 receiving the authorization response from the remote system; and 

14 transferring an electronic funds submission to the payments processor, the 

15 electronic funds submission comprising the payment transaction file and at least a 

16 portion of the authorization response comprising the digital signature. 

17 

1 2. The method of claim 1 wherein: 

2 the authorization control code further provides for the remote system to: 

3 generate additional message attributes; and 

4 combine the additional message attributes with the digest to generate the 

5 authenticated attributes; and 

6 the digital signature comprises a digital signature of a hash of the authenticated 

7 attributes. 

8 

i 3. The method of claim 2, wherein the authorization control code further drives the 
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2 remote system to: 

3 generate and pass a dummy data string to a signing component to obtain a 

4 dummy authentication data structure, the dummy authentication data structure 

5 comprising a dummy digital signature; 

6 pass the authenticated attributes to the signing component to obtain the digital 

7 signature; 

8 combine the digital signature with at least a portion of the dummy authentication 

9 data structure by replacing the dummy digital signature with the digital signature to 

10 generate an authentication data structure; and 

n include the authentication data structure in the authorization response. 

12 

1 4. The method of claim 3; wherein: 

2 the dummy data structure further comprises a dummy digest; and 

3 the authorization control code further drives the remote system to combine the 

4 digest with the dummy authentication data structure to generate the authentication data 

5 structure by replacing the dummy digest with the digest. 

6 

1 5. The method of claim 4: 

2 further comprising authenticating the user of the remote system by: 

3 obtaining logon credentials identifying the user of the remote system; 

4 determining whether the logon credentials match those of an authorized 

5 user; and 

6 the step of transferring the authorization request to the remote system occurs 

7 only if the logon credentials match those of an authorized user. 

8 

1 6. The method of claim 5, further comprising authenticating the user of the remote 

2 system to the payments processor by: 

3 receiving an authentication challenge from the payments processor; 

4 transferring the authentication challenge to the remote system; 
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5 receiving an authentication response from the remote system; and 

6 transferring the authentication response to the payments processor. 

7 

1 7. A method for obtaining an approval of an electronic fund transfer disbursement 

2 file from a user of a remote system and transferring the electronic fund transfer 

3 disbursement file to a payments processor, the method comprising: 

4 generating a digest by performing a hash on the electronic fund transfer 

5 disbursement file; 

6 transferring the digest to the remote system; 

7 receiving an authorization response from the remote system, the authorization 

8 response comprising a digital signature of authenticated attributes, the authenticated 

9 attributes including the digest; 

10 transferring an electronic funds submission to the payments processor over a 

1 1 secure connection, the electronic funds submission comprising the payment transaction 

12 file and at least a portion of the authorization response comprising the digital signature. 

13 

1 8. The method of claim 7 wherein: 

2 the authorization control code further provides for the remote system to: 

3 generate additional message attributes; and 

4 combine the additional message attributes with the digest to generate the 

5 authenticated attributes; and 

6 the digital signature comprises a digital signature of a hash of the authenticated 

7 attributes. 

8 

1 9. The method of claim 8, wherein the remote system: 

2 generates and passes a dummy data file to a signing component to obtain a 

3 dummy authentication data structure, the dummy authentication data structure 

4 comprising a dummy digital signature; 

5 passes the authenticated attributes to the signing component to obtain the digital 
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6 signature; 

7 combines the digital signature with at least a portion of the dummy authentication 

8 data structure by replacing the dummy digital signature with the digital signature to 

9 generate an authentication data structure; and 

10 includes the authentication data structure in the authorization response, 
n 

1 10. The method of claim 9, wherein: 

2 the dummy data structure further comprises a dummy digest; and 

3 the remote system further combines the digest with the dummy authentication 

4 data structure to generate the authentication data structure by replacing the dummy 

5 digest with the digest. 

6 

1 11. The method of claim 10, further comprising: 

2 authenticating the user of the remote system by: 

3 obtaining logon credentials identifying the user of the remote system; 

4 determining whether the logon credentials match those of an authorized user; 

5 and 

6 the step of transferring the authorization request to the remote system occurs 

7 only if the logon credentials match those of an authorized user. 

8 

1 1 2. The method of claim 1 1 , further comprising authenticating the user of the remote 

2 system to the payments processor by: 

3 receiving an authentication challenge from the payments processor; 

4 transferring the authentication challenge to the remote system; 

5 receiving an authentication response from the remote system; and 

6 transferring the authentication response to the payments processor. 

7 

1 1 3. The method of claim 7, further comprising passing authorization control code to 

2 the remote system, the authorization control code being at least one of executable by 
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3 the remote system and interpretable by the remote system for driving the remote 

4 system to: 



5 obtain the digital signature of the authenticated attributes; and 

6 generate the authorization response. 

7 

1 14. The method of claim 13: 

2 the authorization control code further provides for the remote system to: 

3 generate additional message attributes; and 

4 combine the additional message attributes with the digest to generate the 

5 authenticated attributes; and 

6 the digital signature comprises a digital signature of a hash of the authenticated 



7 attributes. 

8 

1 1 5. The method of claim 14, wherein the authorization control code further drives the 

2 remote system to: 



3 generate and pass a dummy data file to a signing component to obtain a dummy 

4 authentication data structure, the dummy authentication data structure comprising a 

5 dummy digital signature; 

6 pass the authenticated attributes to the signing component to obtain the digital 

7 signature; 

8 combine the digital signature with at least a portion of the dummy authentication 

9 data structure by replacing the dummy digital signature with the digital signature to 

10 generate an authentication data structure; and 

n include the authentication data structure in the authorization response. 

12 

1 1 6. The method of claim 1 5: 

2 wherein the dummy data structure further comprises a dummy digest; and 

3 the authorization control code further drives the remote system to combine the 

4 digest with the dummy authentication data structure to generate the authentication data 
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5 structure by replacing the dummy digest with the digest. 



6 

1 1 7. The method of claim 1 6: 

2 further comprising authenticating the user of the remote system by: 

3 obtaining logon credentials identifying the user of the remote system; 

4 o determining whether the logon credentials match those of an authorized 

5 user; and 

6 the step of transferring the authorization request to the remote system occurs 



7 only if the logon credentials match those of an authorized user. 

8 

1 1 8. The method of claim 1 7, further comprising authenticating the user of the remote 

2 system to the payments processor by: 

3 receiving an authentication challenge from the payments processor; 

4 transferring the authentication challenge to the remote system; 

5 receiving an authentication response from the remote system; and 

6 transferring the authentication response to the payments processor. 

7 

8 

9 
10 
11 



